$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft File: o_EASaOTr53KRFlmZBZrh0Avgio.mft (raw, json) Hash identifier: 6Ev02ZyKn1nmAwlZjTqzgPUJNJ8+XEdKBZZOmgHM9zg= Subject key identifier: 6D:A8:ED:E2:82:57:52:14:57:9C:42:43:29:B9:45:D1:73:EE:3A:96 Authority key identifier: A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A Certificate issuer: /CN=A91877A6/serialNumber=A3F10049A393AF9DCA44596664166B87402F822A Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft Manifest number: 13 Signing time: Thu 07 Aug 2025 08:40:54 +0000 Manifest this update: Thu 07 Aug 2025 08:40:54 +0000 Manifest next update: Thu 14 Aug 2025 08:40:54 +0000 Files and hashes: 1: o_EASaOTr53KRFlmZBZrh0Avgio.crl (hash: dX0x1wCJlNLMftmvDBxKBpflCLVTi2EJjX68GFe+iWs=) 2: 4DC60A785C7F11F089D20138C4F9AE02.roa (hash: 6Vnq1spFXaLfT9Zg1ghh5PPz6XLDWciXVK572d6VJmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91877A6, serialNumber=A3F10049A393AF9DCA44596664166B87402F822A Validity Not Before: Aug 7 08:40:54 2025 GMT Not After : Aug 14 08:40:54 2025 GMT Subject: CN=68946696-8e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ed:87:5b:ae:ad:a4:1c:17:7a:7b:80:8c:5d: 7c:21:31:9d:29:4a:81:fb:59:26:0f:29:fa:93:b4: 7d:35:4b:46:1f:8c:8c:d0:c6:74:26:05:73:ae:8d: 1a:f0:a4:bb:6e:f0:3f:1b:ba:86:77:40:a8:37:f7: f9:f2:45:21:e5:3c:e5:2a:b7:9a:21:0b:45:67:eb: 18:d5:7c:a2:b7:ac:09:0c:3a:f4:3a:87:d1:20:49: 89:e9:f3:f7:3f:ae:ea:aa:ab:dc:05:9c:fd:da:3e: 54:f3:db:e4:3b:90:79:5c:80:6a:08:73:05:9e:6b: b2:bc:37:a3:83:73:53:35:d2:44:62:7f:af:e3:2d: dd:90:8c:a7:6c:79:89:15:3b:60:33:87:b7:14:38: df:51:85:f6:ad:d9:62:b9:fb:33:4a:7e:8a:89:77: 67:45:10:bf:7b:b6:11:0a:c5:12:80:93:2f:48:49: 5a:37:19:b1:c7:b8:dc:24:ef:11:c0:c9:48:1d:f9: 5d:7a:4a:59:08:6d:5d:33:f3:f2:10:0c:95:6d:07: d8:aa:74:1a:72:76:b3:1e:8f:ce:e3:21:5b:7b:82: 05:3c:7e:90:c3:5d:49:8d:fe:47:e1:99:77:1f:1e: 4d:1a:13:94:d8:96:c4:ea:0b:2f:15:55:28:dc:22: bd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A8:ED:E2:82:57:52:14:57:9C:42:43:29:B9:45:D1:73:EE:3A:96 X509v3 Authority Key Identifier: keyid:A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:0e:57:b2:83:1f:dd:9f:57:3d:0c:f0:eb:2b:ac:49:47:e5: e7:e4:01:f7:51:ce:ae:45:cd:31:0c:e8:65:1a:a7:fe:82:66: 19:ae:20:7a:10:71:d2:c2:44:a6:4b:da:ef:41:9f:fa:4a:49: 52:b8:20:ef:1e:2d:73:9d:9e:d4:f5:94:86:1c:bd:98:ad:cc: d5:d0:d2:2a:10:c1:86:11:dd:0f:8c:f5:ae:47:b4:5f:c3:13: aa:9a:14:ed:27:c7:5e:44:40:ae:58:7c:37:16:c3:f8:3d:8f: 14:79:7e:c8:53:9e:d3:4e:19:3c:bc:08:38:92:34:5f:43:c7: 84:c7:22:9a:3a:57:f2:7b:e5:7a:ad:ef:36:88:9e:8e:f6:57: 8a:3b:92:4b:0f:7d:21:8c:1f:73:d1:33:1d:b9:41:e3:fd:9f: 2f:9d:77:2d:01:5d:83:c8:d7:47:f2:d0:f1:86:48:00:2b:7d: eb:3f:9e:b4:dc:ff:80:d6:ec:50:10:cb:15:7d:d1:d8:d6:05: be:24:ab:94:f7:25:97:f5:88:c0:6b:bf:2a:3a:8a:02:97:1f: 40:ce:1f:d5:d6:40:8c:32:8a:19:aa:f0:64:dc:fd:76:f4:cc: c8:1a:b6:05:94:b5:42:d9:17:98:99:b3:4f:53:e9:46:7b:25: f4:63:4b:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzdBNjExMC8GA1UEBRMoQTNGMTAwNDlBMzkzQUY5RENBNDQ1OTY2NjQxNjZCODc0 MDJGODIyQTAeFw0yNTA4MDcwODQwNTRaFw0yNTA4MTQwODQwNTRaMBgxFjAUBgNV BAMTDTY4OTQ2Njk2LThlMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd7Ydbrq2kHBd6e4CMXXwhMZ0pSoH7WSYPKfqTtH01S0YfjIzQxnQmBXOujRrw pLtu8D8buoZ3QKg39/nyRSHlPOUqt5ohC0Vn6xjVfKK3rAkMOvQ6h9EgSYnp8/c/ ruqqq9wFnP3aPlTz2+Q7kHlcgGoIcwWea7K8N6ODc1M10kRif6/jLd2QjKdseYkV O2Azh7cUON9Rhfat2WK5+zNKfoqJd2dFEL97thEKxRKAky9ISVo3GbHHuNwk7xHA yUgd+V16SlkIbV0z8/IQDJVtB9iqdBpydrMej87jIVt7ggU8fpDDXUmN/kfhmXcf Hk0aE5TYlsTqCy8VVSjcIr0xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbajt4oJX UhRXnEJDKblF0XPuOpYwHwYDVR0jBBgwFoAUo/EASaOTr53KRFlmZBZrh0Avgiow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3N0E2L0JERUU3Qjg4NUM3 RTExRjBBNUMzNjAzNkM0RjlBRTAyL29fRUFTYU9UcjUzS1JGbG1aQlpyaDBBdmdp by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb19FQVNhT1RyNTNLUkZsbVpCWnJoMEF2Z2lvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 N0E2L0JERUU3Qjg4NUM3RTExRjBBNUMzNjAzNkM0RjlBRTAyL29fRUFTYU9UcjUz S1JGbG1aQlpyaDBBdmdpby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACAOV7KDH92fVz0M8OsrrElH5efkAfdRzq5FzTEM6GUap/6CZhmuIHoQ cdLCRKZL2u9Bn/pKSVK4IO8eLXOdntT1lIYcvZitzNXQ0ioQwYYR3Q+M9a5HtF/D E6qaFO0nx15EQK5YfDcWw/g9jxR5fshTntNOGTy8CDiSNF9Dx4THIpo6V/J75Xqt 7zaIno72V4o7kksPfSGMH3PRMx25QeP9ny+ddy0BXYPI10fy0PGGSAArfes/nrTc /4DW7FAQyxV90djWBb4kq5T3JZf1iMBrvyo6igKXH0DOH9XWQIwyihmq8GTc/Xb0 zMgatgWUtULZF5iZs09T6UZ7JfRjS10= -----END CERTIFICATE-----Generated at Sat Aug 9 01:21:07 2025 by rpki-client